CVE Database›Document archive›CVE-2026-64468

CVE-2026-64468

kernel: binder: fix UAF in binder_free_transaction()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 30, 2026

Description

A flaw was found in the Linux kernel's binder component. A use-after-free (UAF) vulnerability exists in the binder_free_transaction() function, where a process's reference is accessed after the lock protecting it is released, allowing the process to terminate prematurely. A local attacker with low privileges could exploit this to cause a system crash (denial of service) or potentially gain elevated privileges.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-366 · Race Condition within a Thread